fix: aggregate clusterrole to admission controller

Signed-off-by: ShutingZhao <[email protected]>
realshuting · Sep 4, 2024 · f990f4f · f990f4f
1 parent 881e179
commit f990f4f
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/...hainsaw/generate/clusterpolicy/cornercases/cpol-data-trigger-not-present/permissions.yaml b/...hainsaw/generate/clusterpolicy/cornercases/cpol-data-trigger-not-present/permissions.yaml
@@ -18,3 +18,10 @@ rules:
   - create
   - update
   - delete
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - rolebindings
+  verbs:
+  - get
+  - list
diff --git a/test/conformance/chainsaw/generate/validation/policy/target-namespace-scope/permissions.yaml b/test/conformance/chainsaw/generate/validation/policy/target-namespace-scope/permissions.yaml
@@ -15,4 +15,11 @@ rules:
   - create
   - update
   - delete
+  - get
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  verbs:
+  - list
   - get